50 Best Free Cyber Threat Intelligence Tools – 2026
Threat intelligence tools are critical for security industries to assess vulnerabilities in networks and applications. These tools assist in gathering and analyzing information about potential and existing threats to an organization's security…
Threat intelligence tools are critical for security industries to assess vulnerabilities in networks and applications. These tools assist in gathering and analyzing information about potential and existing threats to an organization's security infrastructure.
Alexa's Top 1 Million Sites A list of the top 1 million sites, potentially used as a whitelist.
Apility.io Provides open-source indicators of compromise (IOCs) for detecting malicious activity.
APT Groups and Operations A comprehensive spreadsheet of information on APT groups, their operations, and tactics.
AutoShun Offers a list of approximately 2000 malicious IPs and related resources.
BGP Ranking Rankings of Autonomous System Numbers (ASNs) based on malicious content.
Botnet Tracker Monitors several active botnets.
Standardized formats for sharing threat intelligence, particularly IOCs, are essential for effective communication and response.
CAPEC A dictionary and classification taxonomy of known attacks to advance community understanding and defenses.
Threat intelligence tools are critical for security industries to assess vulnerabilities in networks and applications.
CybOX A language for the exchange of standardized cyber threat information.
IODEF (RFC5070) A framework for sharing information about computer security incidents.
These are frameworks, platforms, and services for collecting, analyzing, creating, and sharing threat intelligence.
AbuseHelper An open-source framework for managing and distributing abuse feeds and threat intelligence.
AbuseIO A security and threat information exchange platform by Microsoft.
AIS Enables the exchange of cyber threat indicators between the Federal Government and the private sector.
Tools for parsing, creating, and editing threat intelligence, mainly focused on IOCs.
ActorTrackr An open-source application for storing and searching actor-related data.
AIEngine An interactive packet inspection engine with capabilities for network intrusion detection.
Automater A tool for simplifying the analysis of URLs, domains, IP addresses, and hash values.
Includes various reading materials, research papers, and standards related to threat intelligence.
APT & Cyber Criminal Campaign Collection An extensive collection of historic cyber campaigns.
APTnotes A collection of resources on advanced persistent threats (APTs), including strategic and tactical advice.
ATT&CK A model and framework for describing adversary actions within enterprise networks.
Based on reporting by GBHackers.